mirror of
https://github.com/carbon-language/carbon-lang.git
synced 2026-09-24 22:00:12 +01:00
Jon Ross-Perkins
6786edd6ff
In addition to the general updates, this switches to a required python 3.10 for pre-commit (3.9 is losing support from black). Note endpoints for build actions are expanding significantly: see https://app.stepsecurity.io/github/carbon-language/carbon-lang/actions/runs/22779388360?tab=recommendations&jobId=66080970460 for example, I think just the sources are being increased as a side-effect of updates (and possibly also things not performing as well as they should have before). Similarly allowing sudo in pre-commit because it was actually causing errors in part of build setup, which used sudo to remove files. Assisted-by: Google Antigravity with Gemini
46 lines
1.5 KiB
YAML
46 lines
1.5 KiB
YAML
# Part of the Carbon Language project, under the Apache License v2.0 with LLVM
|
|
# Exceptions. See /LICENSE for license information.
|
|
# SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
|
|
|
|
# Applies the "proposal rfc" label when a proposal is marked ready for review.
|
|
|
|
name: Proposal ready for review
|
|
on:
|
|
pull_request_target:
|
|
types:
|
|
- ready_for_review
|
|
|
|
permissions:
|
|
pull-requests: write # For gh to edit labels.
|
|
|
|
# TODO: `--repo carbon-language/carbon-lang` is a temporary workaround for:
|
|
# https://github.com/cli/cli/issues/11055
|
|
# Once a later version is released on runners, maybe August 2025, we should be
|
|
# able to remove the extra flag.
|
|
jobs:
|
|
proposal_ready:
|
|
if: contains(github.event.pull_request.labels.*.name, 'proposal')
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Harden Runner
|
|
uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1
|
|
with:
|
|
disable-sudo: true
|
|
egress-policy: block
|
|
# prettier-ignore
|
|
allowed-endpoints: >
|
|
api.github.com:443
|
|
|
|
- name: rfc
|
|
run: |
|
|
gh pr edit "${PR}" \
|
|
--remove-label "proposal draft" \
|
|
--remove-label "proposal accepted" \
|
|
--remove-label "proposal declined" \
|
|
--remove-label "proposal deferred" \
|
|
--add-label "proposal rfc" \
|
|
--repo carbon-language/carbon-lang
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
PR: ${{ github.event.pull_request.html_url }}
|